password_reset_tokens

{“what”:“Unique text key for a single password reset request; primary key.”,“why”:“Without it, individual reset requests cannot be distinguished or targeted.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:05.531851230+00:00”}

{“what”:“Text identifier of the user account that requested the reset.”,“why”:“Without it, the reset cannot be tied to a specific account, and per-user token revocation is impossible.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:05.549859486+00:00”}

{“what”:“Cryptographic hash of the reset token; the raw token is never stored.”,“why”:“Without it, reset tokens would have to be stored in plaintext, risking theft and impersonation.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:05.563580439+00:00”}

{“what”:“UTC timestamp (with time zone) of when the reset request was created.”,“why”:“Without it, token age cannot be computed, and expiry enforcement becomes impossible.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:05.579924663+00:00”}

{“what”:“UTC timestamp after which the token is no longer valid.”,“why”:“Without it, reset links would remain valid forever, increasing account takeover risk.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:05.599752485+00:00”}

{“what”:“UTC timestamp when the token was consumed; null if not yet used.”,“why”:“Without it, a token could be reused multiple times, and redemption status would be unknown.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:56:05.613214856+00:00”}